Russian, North Korean hackers may be sharing resources, programs, experts say

Russian and North Korean cybercrime groups have joined forces and sharing resources, new research suggests.

Experts at cybersecurity firm Gen Digital reported finding an “ unprecedented ” shared infrastructure between formidable hacking groups linked to Moscow and Pyongyang — Russia’s Gamaredon and North Korea’s Lazarus collective.

The cybercriminals also seem to be sharing tactics, the research found.

“I don’t recall two countries working together on [Advanced Persistent Threat] attacks,” said Director of Threat Intelligence at Gen Digital Michal Salat.

Never before has there been a level of coordination between the two countries, according to experts.

Gamaredon has links with Russia’s Federal Security Service — the collective has aggressively targeted Ukraine’s government networks